This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/2f1243e4-dd56-43c1-90e0-aec73f1a9489.roa
File:                     2f1243e4-dd56-43c1-90e0-aec73f1a9489.roa (raw, json)
Hash identifier:          x7JK3kB7RXtz8IkZcX5wQFAn1bkVdH3k0SWfI1aCpx4=
Subject key identifier:   16:46:CF:D6:B3:BB:13:17:1A:89:91:20:11:12:59:28:50:4B:81:B5
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       1610F422389020341210584CDA01D98B23CA5326
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/2f1243e4-dd56-43c1-90e0-aec73f1a9489.roa
Signing time:             Sat 22 Nov 2025 00:00:08 +0000
ROA not before:           Sat 22 Nov 2025 00:00:08 +0000
ROA not after:            Fri 20 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        206.55.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:10:f4:22:38:90:20:34:12:10:58:4c:da:01:d9:8b:23:ca:53:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Nov 22 00:00:08 2025 GMT
            Not After : Feb 20 23:59:59 2026 GMT
        Subject: serialNumber=15f3d36a1772b1ac61c7b12f518521cd2f213f650a657e21ea36be0684004537, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0c:af:a1:e9:d4:b9:c3:71:e4:fb:88:9b:5f:
                    23:e1:5b:81:57:99:0a:1a:f1:bd:d8:a2:65:06:1a:
                    e7:8b:9c:ec:11:91:85:7c:57:e3:37:f3:d1:41:48:
                    fa:63:cf:64:88:ac:b4:aa:f1:4f:41:82:e9:a8:6f:
                    e7:89:26:2f:f7:df:91:eb:81:bd:a2:42:81:e6:74:
                    b6:ab:93:61:ce:c2:89:41:89:ae:56:58:94:0c:17:
                    d0:14:0a:95:a0:3c:fa:55:03:18:34:d9:65:6e:4a:
                    e5:3f:0b:6f:31:b7:b3:bc:43:d5:6c:90:15:44:ee:
                    43:43:32:12:0a:27:31:59:97:d3:e5:61:6d:64:de:
                    32:47:7d:0d:c1:19:2d:99:ad:50:23:63:8f:00:20:
                    b9:3b:8e:3c:95:84:60:a6:4d:7f:e8:7c:26:77:a2:
                    92:61:b9:20:b0:2e:bc:3f:44:05:8c:29:49:82:b0:
                    01:e6:c1:c1:be:d9:52:e2:e1:86:18:f6:52:bb:50:
                    88:b5:9f:01:e3:10:31:5b:7e:09:f7:ad:c5:01:27:
                    36:c0:be:3a:4e:9b:83:fa:da:d0:74:f3:a4:5f:44:
                    2d:37:b9:bb:bd:86:d2:92:e0:84:db:04:69:6f:d6:
                    56:c8:07:de:99:87:86:d7:79:06:96:1e:1a:39:8e:
                    2d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:46:CF:D6:B3:BB:13:17:1A:89:91:20:11:12:59:28:50:4B:81:B5
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/2f1243e4-dd56-43c1-90e0-aec73f1a9489.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.55.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3e:56:ce:af:ea:6e:06:9b:4e:cd:42:17:9c:f9:87:41:da:cc:
         95:7d:d0:47:da:00:4e:9c:ca:5e:ef:36:90:60:70:3c:0e:de:
         af:6c:a8:e0:3e:9f:c8:d4:71:ce:f4:ad:61:07:12:f0:d1:99:
         e7:f3:c5:c5:6d:51:ee:2b:5f:9e:d5:a2:07:7a:03:ec:29:6e:
         27:2b:6d:12:d1:21:5d:4a:3e:d2:55:c1:5a:ee:58:0e:92:d5:
         74:55:20:a5:6e:5c:6a:82:8c:31:39:a4:d2:fd:bd:24:23:d5:
         30:3f:19:b0:a0:03:cc:49:b2:b8:03:51:da:80:a4:d7:96:d5:
         21:18:0a:84:35:37:b5:03:3b:b2:7c:b7:24:66:60:5b:f9:b2:
         e3:5b:6f:12:bf:e8:fb:bf:55:f1:cf:f6:b5:38:b7:f2:29:ad:
         09:ab:40:4c:8f:c2:f1:09:72:c1:7d:0c:80:b1:f5:69:43:2e:
         7c:0d:01:8c:50:6d:e0:91:a3:5a:b3:48:e5:3f:25:40:09:ad:
         37:86:a1:53:06:54:e4:22:d8:c2:64:18:88:15:c1:c0:1c:ff:
         77:7a:96:25:20:01:45:b8:ad:76:35:52:45:56:a8:06:eb:00:
         58:13:86:4b:7b:0c:a7:0b:b1:9a:15:00:1c:e1:1d:19:8c:fb:
         5e:cd:13:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:53:58 2025 by rpki-client